Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File:                     TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier:          5fUBPC54mabnGndawodIsaeXI/A+qLe8YEFffjmk1ME=
Subject key identifier:   4F:5E:D2:5C:7A:BD:4A:13:0D:2E:0F:CC:52:06:62:B7:92:94:06:13
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer:       /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial:       01901CA1B461FF168CB01376BB6BAC3BCD51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 16:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:17 +0000
Files and hashes:         1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: JtkgP97rTuk7WkKZ7GG1nBEFxES3CuD5csv3NfAwbvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:b4:61:ff:16:8c:b0:13:76:bb:6b:ac:3b:cd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
        Validity
            Not Before: Jun 15 16:01:17 2024 GMT
            Not After : Jun 16 16:01:17 2024 GMT
        Subject: CN=4f5ed25c7abd4a130d2e0fcc520662b792940613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:3a:d5:a2:e6:8e:0a:ee:c2:ff:98:04:4a:
                    fa:95:7b:59:79:64:43:90:50:2d:25:b2:eb:7c:46:
                    b8:49:08:6c:7d:d9:35:56:9d:f8:21:55:47:68:69:
                    f7:36:fb:d1:0c:b0:b2:a4:3b:ae:82:87:92:22:35:
                    17:d9:98:3a:c0:76:07:4b:83:d6:ca:e0:a0:95:c4:
                    a0:60:13:39:f0:66:0a:54:df:a7:5a:e9:14:06:a1:
                    0b:99:79:c4:c1:9c:15:84:4d:fb:3f:d7:67:23:4e:
                    46:05:1f:bb:5c:a9:d6:26:d4:7e:0b:35:14:62:e2:
                    46:d9:81:72:0f:73:cc:81:2b:92:fc:6f:7d:53:96:
                    42:82:b2:a2:8f:0c:e1:0f:9c:16:0a:60:67:cc:58:
                    03:11:85:57:7f:dc:65:e7:4f:98:65:bb:98:fc:32:
                    88:06:25:21:aa:c5:f7:0d:06:23:ac:d2:32:94:14:
                    24:9e:1d:48:bd:44:58:cc:78:84:00:ed:5b:fb:8b:
                    34:6a:44:13:48:1a:ba:0e:d2:8f:19:86:cc:a3:a4:
                    49:72:65:f7:60:47:7d:96:6c:d2:9e:47:80:e4:e2:
                    46:3c:54:04:9e:b5:67:a3:da:58:bd:0d:9b:fa:eb:
                    83:3b:c4:c7:24:4c:d0:ec:42:4e:0f:ac:23:df:10:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5E:D2:5C:7A:BD:4A:13:0D:2E:0F:CC:52:06:62:B7:92:94:06:13
            X509v3 Authority Key Identifier:
                keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:32:11:ea:60:ae:a9:d7:82:72:70:8b:57:f3:41:ad:99:
         08:c5:f9:66:4a:51:88:53:8d:70:02:71:f4:af:ff:c2:9c:ad:
         4c:1d:7d:15:de:25:00:aa:18:3a:98:b3:c4:a2:88:ba:62:ff:
         4e:ec:32:0f:10:80:41:6b:1e:7e:9a:d0:03:67:ea:a7:fa:3b:
         e0:7b:3d:ac:61:e0:0b:57:f2:96:fe:cb:4c:67:ce:65:53:4a:
         e1:54:6b:89:a2:4a:0c:10:33:1b:c9:6f:df:73:3d:9f:25:7b:
         7a:ab:6d:52:ec:8d:54:65:68:9f:3b:6f:15:0d:32:3c:e9:98:
         fc:7d:e5:b7:57:77:79:55:98:5a:9c:59:8b:bf:c0:41:cc:61:
         4c:50:a8:35:0f:7d:e4:85:76:97:31:cd:aa:84:a1:37:b4:09:
         1c:49:c1:3d:7a:a8:5c:f4:42:53:de:8d:27:7f:f6:01:b8:cc:
         7e:9d:01:6d:c5:67:bc:48:c6:5c:27:ba:ed:0b:9f:de:15:35:
         21:d7:41:64:35:b1:08:04:a6:c8:e9:d0:5d:52:7e:79:9d:b1:
         ab:37:60:10:74:2a:4c:06:6a:3f:e5:27:2d:9a:a9:c2:d8:88:
         6b:20:55:9d:88:af:0d:26:21:0e:f1:ca:18:f5:1c:b8:90:7a:
         36:8d:8f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcobRh/xaMsBN2u2usO81RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOGMwY2E5YzIxZmExOWRjMDU5MzJiZWZkOTA2MGIxNjBl
ZGM1YzEwHhcNMjQwNjE1MTYwMTE3WhcNMjQwNjE2MTYwMTE3WjAzMTEwLwYDVQQD
Eyg0ZjVlZDI1YzdhYmQ0YTEzMGQyZTBmY2M1MjA2NjJiNzkyOTQwNjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyI61aLmjgruwv+YBEr6lXtZeWRD
kFAtJbLrfEa4SQhsfdk1Vp34IVVHaGn3NvvRDLCypDuugoeSIjUX2Zg6wHYHS4PW
yuCglcSgYBM58GYKVN+nWukUBqELmXnEwZwVhE37P9dnI05GBR+7XKnWJtR+CzUU
YuJG2YFyD3PMgSuS/G99U5ZCgrKijwzhD5wWCmBnzFgDEYVXf9xl50+YZbuY/DKI
BiUhqsX3DQYjrNIylBQknh1IvURYzHiEAO1b+4s0akQTSBq6DtKPGYbMo6RJcmX3
YEd9lmzSnkeA5OJGPFQEnrVno9pYvQ2b+uuDO8THJEzQ7EJOD6wj3xBN4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9e0lx6vUoTDS4PzFIGYreSlAYTMB8GA1UdIwQY
MBaAFE2MDKnCH6GdwFkyvv2QYLFg7cXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83OTAwOTktMmY5MC00M2JjLWJmMGQt
NmQ1NDk2Y2IxYTQyLzEvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83OTAwOTktMmY5MC00M2JjLWJmMGQtNmQ1NDk2Y2IxYTQy
LzEvVFl3TXFjSWZvWjNBV1RLLV9aQmdzV0R0eGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShQyEepg
rqnXgnJwi1fzQa2ZCMX5ZkpRiFONcAJx9K//wpytTB19Fd4lAKoYOpizxKKIumL/
TuwyDxCAQWsefprQA2fqp/o74Hs9rGHgC1fylv7LTGfOZVNK4VRriaJKDBAzG8lv
33M9nyV7eqttUuyNVGVonztvFQ0yPOmY/H3lt1d3eVWYWpxZi7/AQcxhTFCoNQ99
5IV2lzHNqoShN7QJHEnBPXqoXPRCU96NJ3/2AbjMfp0BbcVnvEjGXCe67Quf3hU1
IddBZDWxCASmyOnQXVJ+eZ2xqzdgEHQqTAZqP+UnLZqpwtiIayBVnYivDSYhDvHK
GPUcuJB6No2Ppg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:36:09 2024 by rpki-client on console-fra.rpki-client.org